[java-sig-commits] [Bug 1974891] CVE-2021-34428 jetty: SessionListener can prevent a session from being invalidated breaking logout